Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 5.3 | Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L |
| Product | Vendor | Version |
|---|---|---|
| vim | vim | n/a |
| vim | vim | 4.7.2 on Windows 10 Version 1803 for x64-based Systems |